5.3
Medium
CVE-2024-25615 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol…
Description
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol in ArubaOS 8.x. Successful exploitation of this vulnerability results in the ability to interrupt the normal operation of the affected service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ArubaOS Wi-Fi Controllers and Campus/Remote Access Points | Versions not published | |
| arubaos 6.5 | 6.5.4.0 → < 6.5.5.0 | 6.5.5.0 |
| sd-wan 8.6 | 8.6.0.4 → < 8.7.0.0 | 8.7.0.0 |
Other CVEs of ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
The 7 CVEs of ArubaOS Wi-Fi Controllers and Campus/Remote Access Points →
CVE-2024-25616
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in…
3.7
Low
CVE-2024-25614
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS
5.5
Medium
CVE-2024-25613
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
7.2
High
CVE-2024-25612
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
7.2
High